Vendor onboarding under ISO/IEC 27001 and SOC 2
A franchise head office onboards a cloud vendor that will hold franchisee identity documents and bank details.
- Process
- Vendor onboarding
- Frameworks
- ISO/IEC 27001:2022, SOC 2 (Trust Services Criteria), plus the organisation's own procedure
- Jurisdiction
- Australia, International
- Steps
- 8
- Risks exercised
- injected input, escalation, unrequested action, payment redirection, data access
